Medium severity4.0NVD Advisory· Published Sep 4, 2024· Updated Jun 17, 2026

CVE-2024-20505

Description

A vulnerability in the PDF parsing module of Clam AntiVirus (ClamAV) versions 1.4.0, 1.3.2 and prior versions, all 1.2.x versions, 1.0.6 and prior versions, all 0.105.x versions, all 0.104.x versions, and 0.103.11 and all prior versions could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.

The vulnerability is due to an out of bounds read. An attacker could exploit this vulnerability by submitting a crafted PDF file to be scanned by ClamAV on an affected device. An exploit could allow the attacker to terminate the scanning process.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

ClamAV/Clamav2 versions
cpe:2.3:a:clamav:clamav:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:clamav:clamav:*:*:*:*:*:*:*:*range: <0.103.12
- cpe:2.3:a:clamav:clamav:1.4.0:*:*:*:*:*:*:*
Clam AntiVirus/Clam AntiVirusllm-fuzzy
Range: 1.4.0, 1.3.2 and prior, all 1.2.x, 1.0.6 and prior, all 0.105.x, all 0.104.x, 0.103.11 and prior
Clam AntiVirus/ClamAVllm-fuzzy
Range: 1.4.0, 1.3.2 and prior, all 1.2.x, 1.0.6 and prior, all 0.105.x, all 0.104.x, 0.103.11 and prior
osv-coords89 versions
pkg:apk/chainguard/clamav pkg:apk/chainguard/clamav-1.3 pkg:apk/chainguard/clamav-1.3-clamdscan pkg:apk/chainguard/clamav-1.3-daemon pkg:apk/chainguard/clamav-1.3-db pkg:apk/chainguard/clamav-1.3-dev pkg:apk/chainguard/clamav-1.3-doc pkg:apk/chainguard/clamav-1.3-freshclam pkg:apk/chainguard/clamav-1.3-libunrar pkg:apk/chainguard/clamav-1.3-milter pkg:apk/chainguard/clamav-1.3-scanner pkg:apk/chainguard/clamav-1.4 pkg:apk/chainguard/clamav-1.4-clamdscan pkg:apk/chainguard/clamav-1.4-daemon pkg:apk/chainguard/clamav-1.4-db pkg:apk/chainguard/clamav-1.4-dev pkg:apk/chainguard/clamav-1.4-doc pkg:apk/chainguard/clamav-1.4-docker pkg:apk/chainguard/clamav-1.4-freshclam pkg:apk/chainguard/clamav-1.4-libunrar pkg:apk/chainguard/clamav-1.4-milter pkg:apk/chainguard/clamav-1.4-scanner pkg:apk/chainguard/clamav-clamdscan pkg:apk/chainguard/clamav-daemon pkg:apk/chainguard/clamav-db pkg:apk/chainguard/clamav-dev pkg:apk/chainguard/clamav-doc pkg:apk/chainguard/clamav-libunrar pkg:apk/chainguard/clamav-milter pkg:apk/chainguard/clamav-scanner pkg:apk/chainguard/freshclam pkg:apk/wolfi/clamav pkg:apk/wolfi/clamav-1.3 pkg:apk/wolfi/clamav-1.3-clamdscan pkg:apk/wolfi/clamav-1.3-daemon pkg:apk/wolfi/clamav-1.3-db pkg:apk/wolfi/clamav-1.3-dev pkg:apk/wolfi/clamav-1.3-doc pkg:apk/wolfi/clamav-1.3-freshclam pkg:apk/wolfi/clamav-1.3-libunrar pkg:apk/wolfi/clamav-1.3-milter pkg:apk/wolfi/clamav-1.3-scanner pkg:apk/wolfi/clamav-1.4 pkg:apk/wolfi/clamav-1.4-clamdscan pkg:apk/wolfi/clamav-1.4-daemon pkg:apk/wolfi/clamav-1.4-db pkg:apk/wolfi/clamav-1.4-dev pkg:apk/wolfi/clamav-1.4-doc pkg:apk/wolfi/clamav-1.4-docker pkg:apk/wolfi/clamav-1.4-freshclam pkg:apk/wolfi/clamav-1.4-libunrar pkg:apk/wolfi/clamav-1.4-milter pkg:apk/wolfi/clamav-1.4-scanner pkg:apk/wolfi/clamav-clamdscan pkg:apk/wolfi/clamav-daemon pkg:apk/wolfi/clamav-db pkg:apk/wolfi/clamav-dev pkg:apk/wolfi/clamav-doc pkg:apk/wolfi/clamav-libunrar pkg:apk/wolfi/clamav-milter pkg:apk/wolfi/clamav-scanner pkg:apk/wolfi/freshclam pkg:rpm/opensuse/clamav&distro=openSUSE%20Leap%2015.5 pkg:rpm/opensuse/clamav&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/clamav&distro=openSUSE%20Tumbleweed pkg:rpm/suse/clamav&distro=SUSE%20Enterprise%20Storage%207.1 pkg:rpm/suse/clamav&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSS pkg:rpm/suse/clamav&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS pkg:rpm/suse/clamav&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-ESPOS pkg:rpm/suse/clamav&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-LTSS pkg:rpm/suse/clamav&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-ESPOS pkg:rpm/suse/clamav&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-LTSS pkg:rpm/suse/clamav&distro=SUSE%20Linux%20Enterprise%20Micro%205.5 pkg:rpm/suse/clamav&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP5 pkg:rpm/suse/clamav&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP6 pkg:rpm/suse/clamav&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/clamav&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5-LTSS pkg:rpm/suse/clamav&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSS pkg:rpm/suse/clamav&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS pkg:rpm/suse/clamav&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP4-LTSS pkg:rpm/suse/clamav&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP5-LTSS pkg:rpm/suse/clamav&distro=SUSE%20Linux%20Enterprise%20Server%20LTSS%20Extended%20Security%2012%20SP5 pkg:rpm/suse/clamav&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/clamav&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2 pkg:rpm/suse/clamav&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3 pkg:rpm/suse/clamav&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP4 pkg:rpm/suse/clamav&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP5 pkg:rpm/suse/clamav&distro=SUSE%20Manager%20Proxy%204.3 pkg:rpm/suse/clamav&distro=SUSE%20Manager%20Server%204.3
< 1.4.1-r0+ 88 more
- (no CPE)range: < 1.4.1-r0
- (no CPE)range: < 1.3.2-r0
- (no CPE)range: < 1.3.2-r0
- (no CPE)range: < 1.3.2-r0
- (no CPE)range: < 1.3.2-r0
- (no CPE)range: < 1.3.2-r0
- (no CPE)range: < 1.3.2-r0
- (no CPE)range: < 1.3.2-r0
- (no CPE)range: < 1.3.2-r0
- (no CPE)range: < 1.3.2-r0
- (no CPE)range: < 1.3.2-r0
- (no CPE)range: < 1.4.1-r0
- (no CPE)range: < 1.4.1-r0
- (no CPE)range: < 1.4.1-r0
- (no CPE)range: < 1.4.1-r0
- (no CPE)range: < 1.4.1-r0
- (no CPE)range: < 1.4.1-r0
- (no CPE)range: < 1.4.1-r0
- (no CPE)range: < 1.4.1-r0
- (no CPE)range: < 1.4.1-r0
- (no CPE)range: < 1.4.1-r0
- (no CPE)range: < 1.4.1-r0
- (no CPE)range: < 1.4.1-r0
- (no CPE)range: < 1.4.1-r0
- (no CPE)range: < 1.4.1-r0
- (no CPE)range: < 1.4.1-r0
- (no CPE)range: < 1.4.1-r0
- (no CPE)range: < 1.4.1-r0
- (no CPE)range: < 1.4.1-r0
- (no CPE)range: < 1.4.1-r0
- (no CPE)range: < 1.4.1-r0
- (no CPE)range: < 1.4.1-r0
- (no CPE)range: < 1.3.2-r0
- (no CPE)range: < 1.3.2-r0
- (no CPE)range: < 1.3.2-r0
- (no CPE)range: < 1.3.2-r0
- (no CPE)range: < 1.3.2-r0
- (no CPE)range: < 1.3.2-r0
- (no CPE)range: < 1.3.2-r0
- (no CPE)range: < 1.3.2-r0
- (no CPE)range: < 1.3.2-r0
- (no CPE)range: < 1.3.2-r0
- (no CPE)range: < 1.4.1-r0
- (no CPE)range: < 1.4.1-r0
- (no CPE)range: < 1.4.1-r0
- (no CPE)range: < 1.4.1-r0
- (no CPE)range: < 1.4.1-r0
- (no CPE)range: < 1.4.1-r0
- (no CPE)range: < 1.4.1-r0
- (no CPE)range: < 1.4.1-r0
- (no CPE)range: < 1.4.1-r0
- (no CPE)range: < 1.4.1-r0
- (no CPE)range: < 1.4.1-r0
- (no CPE)range: < 1.4.1-r0
- (no CPE)range: < 1.4.1-r0
- (no CPE)range: < 1.4.1-r0
- (no CPE)range: < 1.4.1-r0
- (no CPE)range: < 1.4.1-r0
- (no CPE)range: < 1.4.1-r0
- (no CPE)range: < 1.4.1-r0
- (no CPE)range: < 1.4.1-r0
- (no CPE)range: < 1.4.1-r0
- (no CPE)range: < 0.103.12-150000.3.53.1
- (no CPE)range: < 0.103.12-150600.18.3.1
- (no CPE)range: < 1.4.1-1.1
- (no CPE)range: < 0.103.12-150000.3.53.1
- (no CPE)range: < 0.103.12-150000.3.53.1
- (no CPE)range: < 0.103.12-150000.3.53.1
- (no CPE)range: < 0.103.12-150000.3.53.1
- (no CPE)range: < 0.103.12-150000.3.53.1
- (no CPE)range: < 1.4.2-150200.8.3.1
- (no CPE)range: < 1.4.2-150200.8.3.1
- (no CPE)range: < 1.4.2-150200.8.3.1
- (no CPE)range: < 0.103.12-150000.3.53.1
- (no CPE)range: < 0.103.12-150600.18.3.1
- (no CPE)range: < 0.103.12-3.33.1
- (no CPE)range: < 1.4.2-3.36.1
- (no CPE)range: < 0.103.12-150000.3.53.1
- (no CPE)range: < 0.103.12-150000.3.53.1
- (no CPE)range: < 0.103.12-150000.3.53.1
- (no CPE)range: < 1.4.2-150200.8.3.1
- (no CPE)range: < 1.4.2-3.36.1
- (no CPE)range: < 0.103.12-3.33.1
- (no CPE)range: < 0.103.12-150000.3.53.1
- (no CPE)range: < 0.103.12-150000.3.53.1
- (no CPE)range: < 0.103.12-150000.3.53.1
- (no CPE)range: < 1.4.2-150200.8.3.1
- (no CPE)range: < 0.103.12-150000.3.53.1
- (no CPE)range: < 0.103.12-150000.3.53.1
Cisco Systems, Inc./Clamavv5
Range: 1.4.0

Patches

Vulnerability mechanics

References

blog.clamav.net/2024/09/clamav-141-132-107-and-010312-security.htmlnvdPatchVendor Advisory
lists.debian.org/debian-lts-announce/2024/12/msg00004.htmlnvd

News mentions

No linked articles in our index yet.

cvss	0.260
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000